Citrix Access Gateway Sårbarheter

Version

4.0	8
4.1	8
4.2	8
4.3	8
4.4	8

Åtgärd

Official Fix	18
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	2

Utnyttjbarhet

High	4
Functional	0
Proof-of-Concept	10
Unproven	0
Not Defined	6

Åtkomstvektor

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	20

Autentisering

Not Defined	0
High	0
Low	2
None	18

Användarinteraktion

Not Defined	0
Required	4
None	16

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	10
≤7	0
≤8	4
≤9	2
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	4
≤6	6
≤7	4
≤8	2
≤9	0
≤10	4

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	10
≤7	0
≤8	4
≤9	2
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Säljare

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Utnyttja 0-dagars

<1k	0
<2k	0
<5k	0
<10k	2
<25k	4
<50k	14
<100k	0
≥100k	0

Utnyttja idag

<1k	20
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (35): 4.0, 4.1, 4.2, 4.3, 4.4, 4.5, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 5, 5.0.03, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 8.0, 8.1, 8.1-69, 8.1-69.1, 8.1-69.2, 8.1-69.3, 8.1-69.4, 9.0, 9.3.49, 9.3.49.1, 9.3.49.2, 9.3.49.3, 9.3.49.4, 9.3.49.5, 10.0.74, 10.0.74.1, 10.0.74.2, 10.0.74.3, 10.0.74.4

Link to Product Website: https://www.citrix.com/

Programvarutyp: Connectivity Software

Publicerad	Base	Temp	Sårbarhet	0day	I dag	Utn	Rem	CTI	CVE
12/08/2014	7.3	7.0	Citrix Access Gateway Plug-in ActiveX Control nsepa.exe Remote Code Execution	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2011-2593
25/04/2013	5.9	5.7	Citrix Access Gateway Access Restriction privilegier eskalering	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2013-2767
05/03/2013	6.5	5.7	Citrix Access Gateway privilegier eskalering	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	CVE-2013-2263
01/08/2012	10.0	9.0	Citrix Access Gateway Plugin nsepa.exe StartEPA minneskorruption	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.02	CVE-2011-2592
31/07/2012	5.3	5.1	Citrix Access Gateway okänd sårbarhet	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00
31/07/2012	6.5	6.2	Citrix Access Gateway kataloggenomgång	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00
31/07/2012	5.3	5.1	Citrix Access Gateway okänd sårbarhet	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00
24/08/2011	5.5	5.3	Citrix Access Gateway cross site scripting	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00
21/07/2011	10.0	9.0	Citrix Access Gateway ActiveX Control nsepa.ocx privilegier eskalering	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2011-2883
21/07/2011	10.0	9.5	Citrix Access Gateway ActiveX Control nsepa.ocx minneskorruption	$25k-$100k	$0-$5k	High	Official Fix	0.00	CVE-2011-2882